Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
File:                     ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa (raw, json)
Hash identifier:          h6mk2Wy0zxzlUK2SrBvuX/g8TNvDydhuziBu83KP2/k=
Subject key identifier:   37:15:8B:02:E9:50:E2:A2:01:A6:6E:64:E9:CF:4C:A8:A0:22:E6:B0
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584EA78768EF11F561A1D1CCAB59
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6507
IP address blocks:        151.106.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:68:ef:11:f5:61:a1:d1:cc:ab:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dda84c5e-eb61-4725-b712-d9f62b21f3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:07:1a:1d:60:a2:29:23:be:38:62:fe:be:
                    94:5e:94:22:d4:ea:a0:72:54:40:f6:a8:f2:c5:9e:
                    a2:0f:b0:43:58:88:54:e0:f3:f1:04:c3:89:4e:5f:
                    80:35:55:f7:49:bf:61:be:2d:7e:20:14:a6:6a:00:
                    d6:2a:2d:ae:36:dc:e9:21:84:0d:dc:1d:bc:59:44:
                    41:a3:cc:74:0d:91:73:ab:19:c0:a4:36:b5:a7:e1:
                    9d:f3:f0:7f:50:4d:c5:00:32:db:8b:5d:df:89:82:
                    b1:26:47:77:3b:9e:01:5d:8b:ab:e8:c8:1f:87:87:
                    6a:1e:1d:de:ab:20:99:c8:71:e7:7b:e0:53:97:4a:
                    7f:15:61:74:15:09:40:e6:9a:e4:9f:9e:ae:e2:d8:
                    2c:32:ba:40:52:0e:94:d9:a0:dd:53:ec:1c:07:29:
                    71:80:15:55:a4:1b:03:13:de:ec:1d:ff:22:5c:6e:
                    a6:a1:41:61:b9:98:ca:b5:77:e7:b0:49:fd:d7:a5:
                    d7:f1:1d:54:6a:d9:bd:f4:8f:17:bd:6a:c7:67:4c:
                    31:15:36:1e:f0:ce:81:f6:a6:48:ec:d0:9d:fc:70:
                    6a:53:f0:c2:ec:4d:73:d9:5c:a3:1d:5e:b2:c2:44:
                    ad:ec:1b:60:21:50:cd:ee:bd:8f:34:53:5f:de:9f:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:8B:02:E9:50:E2:A2:01:A6:6E:64:E9:CF:4C:A8:A0:22:E6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:d9:d2:88:83:0e:54:58:92:c5:ed:e2:4c:69:72:f5:bf:c6:
         dc:2a:81:dc:92:09:0f:96:41:56:97:d5:9b:7a:d7:fd:29:73:
         65:a4:46:74:eb:1b:3b:0d:19:44:99:6c:a5:8a:5d:8f:8b:67:
         3e:f4:2a:f3:31:68:75:e1:9d:a5:48:5e:7d:b8:af:9a:d7:13:
         19:ce:df:74:2e:d4:3e:d1:15:a6:a4:4a:3c:4e:d0:60:f9:a4:
         57:a3:8e:ec:cb:c9:05:f2:54:8c:8d:63:bb:4c:aa:b4:90:cf:
         91:e6:8b:bf:c0:45:ef:ea:72:d3:ac:71:93:28:fd:33:96:3a:
         bb:42:fe:56:f8:a4:a7:30:5b:ed:2b:2a:dc:69:e5:48:d4:a5:
         d9:61:d6:6f:0b:29:35:48:9a:25:e4:ef:1f:53:07:62:f7:1f:
         a1:d8:11:b6:e0:98:a4:be:08:1b:0d:78:75:e8:52:55:71:8b:
         f0:ef:a4:3a:08:ca:31:14:c9:97:81:04:4c:98:57:ea:94:eb:
         78:53:f3:e5:70:89:a3:94:95:d1:c8:31:ce:c7:32:a7:8d:a0:
         fc:95:b1:40:1e:63:18:ed:69:40:4e:0a:a5:ef:7b:0b:13:3c:
         0d:1e:77:5d:87:c5:95:c3:a2:a6:20:bb:67:06:44:bf:91:ab:
         44:d0:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:28:53 2026 by rpki-client